Page MenuHomeFreeBSD
Differential D8160

Fix potential use-after free in taskqueue_drain_all
ClosedPublic
Actions

Authored by julian on Oct 5 2016, 11:52 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, May 1, 11:49 PM
Unknown Object (File)
Wed, May 1, 11:14 PM
Unknown Object (File)
Wed, May 1, 11:14 PM
Unknown Object (File)
Wed, May 1, 11:13 PM
Unknown Object (File)
Wed, May 1, 10:49 PM
Unknown Object (File)
Sun, Apr 28, 10:34 PM
Unknown Object (File)
Wed, Apr 24, 6:45 AM
Unknown Object (File)
Tue, Apr 16, 6:04 PM
View All 39 Files
Subscribers
imp
op

Details

Reviewers
adrian
Commits
rS306935: While the thread is sleeping in taskqueue_drain_all() it is
Summary

While the thread is sleeping it is posible that the queue entry it
is looking at is removed from the queue, but we make no effort to
account for this.

Test Plan

Systems which used to hang due to this now boot

Diff Detail

Event Timeline

julian updated this revision to Diff 21091.Oct 5 2016, 11:52 PM
julian retitled this revision from to Fix potential use-after free in taskqueue_drain_all.
julian updated this object.
julian edited the test plan for this revision. (Show Details)
Herald added a subscriber: imp. · View Herald TranscriptOct 5 2016, 11:52 PM
adrian accepted this revision.Oct 7 2016, 8:34 PM
adrian added a reviewer: adrian.
This revision is now accepted and ready to land.Oct 7 2016, 8:34 PM
op added a subscriber: op.Oct 8 2016, 12:38 PM

Please commit this patch, this fixes FreeBSD PR 209580.

julian added a comment.Oct 10 2016, 4:42 AM
This comment was removed by julian.
Closed by commit rS306935: While the thread is sleeping in taskqueue_drain_all() it is (authored by julian). · Explain WhyOct 10 2016, 4:57 AM
This revision was automatically updated to reflect the committed changes.
julian mentioned this in rS306935: While the thread is sleeping in taskqueue_drain_all() it is.

Revision Contents
Changeset List

PathSize
sys/
kern/
23 lines

Diff 21091

View Options

sys/kern/subr_taskqueue.c

Loading...